RE: closing ports

["Anjan Dave" <adave () vantage com>]

Also, close all outbound ports except the needed ones.

-anjan

-----Original Message-----
From: marko [mailto:chrome () liquidinfo net] 
Sent: Friday, November 07, 2003 9:38 AM
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] closing ports


Hi,

On Fri, 07 Nov 2003 02:58:04 -0500
"Christ-Henning Ljosheim" <chris () megasat no> wrote:

> I've closed port 1214 and 6881 to 6889 . Anyone else I should close ?

I recommend you take the default approach of denying everything instead
of closing certain ports. After this has been done, allow the necessary
inbound traffic to your host(s) that you need. 

Home-users rarely need any inbound traffic, unless they're using some
P2P programs or similar stuff. Public servers on the other hand require
some ports open (how else could they serve?). For example a web-server
requires port 80 to serve any pages to clients, assuming the server is
setup to listen on that port.

-m-
-- 
- Liquid Information - http://www.liquidinfo.net
- E-mail: Remove NOS_PAM if present in address (Usenet)
- PGP: http://www.liquidinfo.net/about.html
--

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html